/var/log/messages: May 27 16:19:36 BUG: unable to handle kernel NULL pointer dereference at virtual address 00000b78 May 27 16:19:36 printing eip: May 27 16:19:36 c01340c0 May 27 16:19:36 *pde = 00000000 May 27 16:19:36 Oops: 0000 [#1] May 27 16:19:36 Modules linked in: snd_emu10k1 snd_util_mem snd_hwdep May 27 16:19:36 CPU: 0 May 27 16:19:36 EIP: 0060:[] Not tainted VLI May 27 16:19:36 EFLAGS: 00210206 (2.6.17-gentoo-r8 #3) May 27 16:19:36 EIP is at unmap_vmas+0x12c/0x41a May 27 16:19:36 eax: 00000b78 ebx: c13140c0 ecx: 00000b78 edx: b7a96b00 May 27 16:19:36 esi: b7a90000 edi: c6e49a3c ebp: 00000020 esp: cfaf1f10 May 27 16:19:36 ds: 007b es: 007b ss: 0068 May 27 16:19:36 Process apache2 (pid: 20606, threadinfo=cfaf0000 task=c2615580) May 27 16:19:36 Stack: 00000000 c7fff8b4 cfaf1f70 000333be 00000000 00000001 b7a96b00 00000b78 May 27 16:19:36 db71f5c0 c0413a6c 00000000 fffffffc 00000b78 b7a96b00 00000000 cfaf1f70 May 27 16:19:36 c907c5f4 db71f5c0 cfaf1fac c0136458 ffffffff cfaf1f6c 00000000 00000da1 May 27 16:19:36 Call Trace: May 27 16:19:36 exit_mmap+0x50/0xb9 mmput+0x1b/0x5e May 27 16:19:36 do_exit+0x164/0x619 sys_exit_group+0x0/0xd May 27 16:19:36 syscall_call+0x7/0xb May 27 16:19:36 Code: 4c 24 1c 25 00 00 c0 ff 89 44 24 18 89 c2 8b 44 24 34 4a 89 4c 24 30 48 39 c2 8b 54 24 34 0f 42 54 24 18 89 54 24 18 8b 4$ May 27 16:19:36 EIP: [] unmap_vmas+0x12c/0x41a SS:ESP 0068:cfaf1f10 May 27 16:19:36 <1>Fixing recursive fault but reboot is needed! access_log (seconds leading up to kernel fault): 66.221.181.10 - - [27/May/2007:11:57:07 -0500] "GET /email//README HTTP/1.1" 404 275 66.221.181.10 - - [27/May/2007:11:57:07 -0500] "GET /webmail//README HTTP/1.1" 404 277 66.221.181.10 - - [27/May/2007:11:57:08 -0500] "GET /newmail//README HTTP/1.1" 404 277 66.221.181.10 - - [27/May/2007:11:57:08 -0500] "GET /mails//README HTTP/1.1" 404 275 66.221.181.10 - - [27/May/2007:11:57:08 -0500] "GET /mailz//README HTTP/1.1" 404 275 66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET //chat/messagesL.php3 HTTP/1.1" 404 282 66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /chat//chat/messagesL.php3 HTTP/1.1" 404 287 66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /phpchat//chat/messagesL.php3 HTTP/1.1" 404 290 66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /PhpMyChat//chat/messagesL.php3 HTTP/1.1" 404 292 66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /chatroom//chat/messagesL.php3 HTTP/1.1" 404 291 66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /chats//chat/messagesL.php3 HTTP/1.1" 404 288 66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /forum//chat/messagesL.php3 HTTP/1.1" 404 288 66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /php/phpmychat//chat/messagesL.php3 HTTP/1.1" 404 296 66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /phpMyChat-0.14.2//chat/messagesL.php3 HTTP/1.1" 404 299 66.221.181.10 - - [27/May/2007:12:55:57 -0500] "GET /phpMyChat-0.14.5//chat/messagesL.php3 HTTP/1.1" 404 299 66.221.181.10 - - [27/May/2007:12:55:58 -0500] "GET /phpMyChat//chat/messagesL.php3 HTTP/1.1" 404 292 66.221.181.10 - - [27/May/2007:12:55:59 -0500] "GET /phpMyChat-0.14.3//chat/messagesL.php3 HTTP/1.1" 404 299 66.221.181.10 - - [27/May/2007:12:55:59 -0500] "GET /phpMyChat-0.14.4//chat/messagesL.php3 HTTP/1.1" 404 299 66.221.181.10 - - [27/May/2007:12:56:02 -0500] "GET /forums//chat/messagesL.php3 HTTP/1.1" 404 289 66.221.181.10 - - [27/May/2007:12:56:02 -0500] "GET /chat2//chat/messagesL.php3 HTTP/1.1" 404 288 66.221.181.10 - - [27/May/2007:12:56:02 -0500] "GET /chat3//chat/messagesL.php3 HTTP/1.1" 404 288 66.221.181.10 - - [27/May/2007:12:56:02 -0500] "GET /community//chat/messagesL.php3 HTTP/1.1" 404 292 66.221.181.10 - - [27/May/2007:14:50:44 -0500] "GET //xmlrpc.php HTTP/1.1" 404 273 66.221.181.10 - - [27/May/2007:14:50:44 -0500] "GET //xmlrpc/xmlrpc.php HTTP/1.1" 404 280 66.221.181.10 - - [27/May/2007:14:50:44 -0500] "GET //xmlsrv/xmlrpc.php HTTP/1.1" 404 280 66.221.181.10 - - [27/May/2007:14:50:44 -0500] "GET //blog/xmlrpc.php HTTP/1.1" 404 278 66.221.181.10 - - [27/May/2007:14:50:44 -0500] "GET //drupal/xmlrpc.php HTTP/1.1" 404 280 66.221.181.10 - - [27/May/2007:14:50:44 -0500] "GET //community/xmlrpc.php HTTP/1.1" 404 283 66.221.181.10 - - [27/May/2007:14:50:44 -0500] "GET //blogs/xmlrpc.php HTTP/1.1" 404 279 66.221.181.10 - - [27/May/2007:14:50:51 -0500] "GET //blogtest/xmlsrv/xmlrpc.php HTTP/1.1" 404 289 66.221.181.10 - - [27/May/2007:14:50:51 -0500] "GET //b2/xmlsrv/xmlrpc.php HTTP/1.1" 404 283 66.221.181.10 - - [27/May/2007:14:50:54 -0500] "GET //wordpress/xmlrpc.php HTTP/1.1" 404 283 66.221.181.10 - - [27/May/2007:14:50:54 -0500] "GET //phpgroupware/xmlrpc.php HTTP/1.1" 404 286 66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //awstats.pl HTTP/1.1" 404 273 66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //cgi-bin/awstats.pl HTTP/1.1" 404 281 66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //scgi-bin/awstats.pl HTTP/1.1" 404 282 66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //awstats/awstats.pl HTTP/1.1" 404 281 66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //cgi-bin/awstats/awstats.pl HTTP/1.1" 404 289 66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //scgi-bin/awstats/awstats.pl HTTP/1.1" 404 290 66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //cgi/awstats/awstats.pl HTTP/1.1" 404 285 66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //scgi/awstats/awstats.pl HTTP/1.1" 404 286 66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //scripts/awstats.pl HTTP/1.1" 404 281 66.221.181.10 - - [27/May/2007:16:19:31 -0500] "GET //cgi-bin/awstats/awstats.pl HTTP/1.1" 404 289 66.221.181.10 - - [27/May/2007:16:19:32 -0500] "GET //scgi-bin/awstats/awstats.pl HTTP/1.1" 404 290 66.221.181.10 - - [27/May/2007:16:19:33 -0500] "GET //cgi-bin/stats/awstats.pl HTTP/1.1" 404 287 66.221.181.10 - - [27/May/2007:16:19:33 -0500] "GET //scgi-bin/stats/awstats.pl HTTP/1.1" 404 288 66.221.181.10 - - [27/May/2007:16:19:33 -0500] "GET //stats/awstats.pl HTTP/1.1" 404 279 lsof output: apache2 20606 apache cwd DIR 3,2 4096 2 / apache2 20606 apache rtd DIR 3,2 4096 2 / apache2 20606 apache txt unknown /proc/20606/exe (readlink: No such file or directory) apache2 20606 apache 0r CHR 1,3 1114 /dev/null apache2 20606 apache 1w CHR 1,3 1114 /dev/null apache2 20606 apache 2w REG 3,2 364317 1277287 /var/log/apache2/error_log apache2 20606 apache 3u IPv4 100098588 TCP *:http (LISTEN) apache2 20606 apache 6w REG 3,2 364317 1277287 /var/log/apache2/error_log apache2 20606 apache 7w REG 3,2 873204 1277296 /var/log/apache2/access_log relevant ps -ef output: sbin # ps -ef UID PID PPID C STIME TTY TIME CMD root 1 0 0 May09 ? 00:00:00 init [3] apache 20606 1 0 May14 ? 00:01:11 [apache2] ps -aux output: USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND apache 20606 0.0 0.0 0 0 ? D May14 1:11 [apache2]